org.openapitools:openapi-generator-gradle-plugin (3.1.1), org.openapitools:openapi-generator-maven-plugin (3.1.1) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.1.1)

org.openapitools:openapi-generator MAVEN version 3.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.1.1 -...

org.openapitools:openapi-generator-gradle-plugin (3.2.3), org.openapitools:openapi-generator-maven-plugin (3.2.3) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.2.3)

org.openapitools:openapi-generator MAVEN version 3.2.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.2.3 -...

org.openapitools:openapi-generator-gradle-plugin (3.3.3), org.openapitools:openapi-generator-maven-plugin (3.3.3) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.3.3)

org.openapitools:openapi-generator MAVEN version 3.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.3 -...

org.openapitools:openapi-generator-gradle-plugin (3.3.1), org.openapitools:openapi-generator-maven-plugin (3.3.1) +1 more potentially affected by CVE-2019-11405 via org.openapitools:openapi-generator (3.3.1)

org.openapitools:openapi-generator MAVEN version 3.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.openapitools:openapi-generator and may be impacted: - org.openapitools:openapi-generator-gradle-plugin 3.3.1 -...

Fedora: Security Advisory for golang-k8s-kube-openapi (FEDORA-2022-08ae2dd481)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-k8s-kube-openapi-0-0.20.20210813git3c81807.fc36

Kubernetes OpenAPI spec generation & serving...

[SECURITY] Fedora 36 Update: golang-github-googleapis-gnostic-0.5.3-5.fc36

This package contains a Go command line tool which converts JSON and YAML OpenAPI descriptions to and from equivalent Protocol Buffer representations. Protocol Buffers provide a language-neutral, platform-neutral, extensible mechanism for serializing structured data. gnostic's Protocol Buffer...

Fedora: Security Advisory for golang-github-googleapis-gnostic (FEDORA-2022-5cbd6de569)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora: Security Advisory for golang-github-googleapis-gnostic (FEDORA-2022-3a63897745)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 34 Update: golang-github-googleapis-gnostic-0.5.3-5.fc34

This package contains a Go command line tool which converts JSON and YAML OpenAPI descriptions to and from equivalent Protocol Buffer representations. Protocol Buffers provide a language-neutral, platform-neutral, extensible mechanism for serializing structured data. gnostic's Protocol Buffer...

[SECURITY] Fedora 35 Update: golang-github-googleapis-gnostic-0.5.3-5.fc35

This package contains a Go command line tool which converts JSON and YAML OpenAPI descriptions to and from equivalent Protocol Buffer representations. Protocol Buffers provide a language-neutral, platform-neutral, extensible mechanism for serializing structured data. gnostic's Protocol Buffer...

OpenAPI Missing MIME Types

OpenAPI specification is an API description format for REST APIs. An OpenAPI file is written in YAML or JSON and describes all the API properties like the available endpoints with the related operations or the authentication methods. The consumes field defines the expected data types for POST, PU...

Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to spoofing attacks and clickjacking due to swagger-ui (CVE-2018-25031, CVE-2021-46708)

Summary There are multiple vulnerabilities in the swagger-ui library used by IBM WebSphere Application Server Liberty with mpOpenAPI-1.0, mpOpenAPI-1.1, mpOpenAPI-2.0, mpOpenAPI-3.0, openapi-3.0 or the openapi-3.1 feature enabled. These vulnerabilities could allow spoofing attacks or clickjacking...

[SECURITY] Fedora 36 Update: python-fastapi-0.75.0-3.fc36

FastAPI is a modern, fast high-performance, web framework for building APIs with Python 3.6+ based on standard Python type hints. The key features are: =EF=BF=BD=EF=BF=BD=EF=BF=BD Fast: Very high performance, on par with NodeJS and Go thanks to Starlette and Pydantic. One of the fastest Python...

Spoofing Attack

swagger-ui-react is vulnerable to spoofing attack. The vulnerability allows remote attackers to acquire remote OpenAPI definitions by persuading the victim to open a specifically crafted URL...

Spoofing attack in swagger-ui

Swagger UI before 4.1.3 could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions...

GHSA-CR3Q-PQGQ-M8C2 Spoofing attack in swagger-ui

Swagger UI before 4.1.3 could allow a remote attacker to conduct spoofing attacks. By persuading a victim to open a crafted URL, an attacker could exploit this vulnerability to display remote OpenAPI definitions...

@egomobile/http-server (>=0.18.0, <=0.23.0), @lyra-network/openapi-dev-tool (>=9.0.0, <=9.5.0) +1 more potentially affected by CVE-2021-46708 via swagger-ui-dist (>=4.0.0-beta.2, <=4.1.2)

swagger-ui-dist NPM version =4.0.0-beta.2, =0.18.0, =9.0.0, =1.3.0-moderate-vulnerability, =24.7.0-moderate-vulnerability Source cves: CVE-2021-46708 Source advisory: GHSA-6C9X-MJ3G-H47X...

com.github.phillip-kruger.microprofile-extentions:openapi-ext (>=1.0.5, <=1.0.6), org.apache.cxf.systests:cxf-systests-jaxrs (3.2.5) potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.17.0)

org.webjars:swagger-ui MAVEN version 3.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - com.github.phillip-kruger.microprofile-extentions:openapi-ext =1.0.5, =1.0.6 -...

io.quarkus:quarkus-smallrye-openapi-deployment (1.9.0.cr1), io.quarkus:quarkus-swagger-ui-deployment (1.9.0.cr1) potentially affected by CVE-2018-25031 via org.webjars:swagger-ui (3.35.0)

org.webjars:swagger-ui MAVEN version 3.35.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.webjars:swagger-ui and may be impacted: - io.quarkus:quarkus-smallrye-openapi-deployment 1.9.0.cr1 - io.quarkus:quarkus-swagger-ui-deployment 1.9.0.cr1 Sour...